skysight-inc/HackerNews huggingface dataset:
it's a Mac and Linux thing.
Is there a bounty for zero days?
HardBreak- a Hardware Hacking Wiki
Hey everyone!
I’ve been working on HardBreak (https://www.hardbreak.wiki/), an open-source Hardware Hacking Wiki that aims to gather all the essential knowledge for hardware hackers in one place. Whether you’re a beginner or more advanced, I hope you’ll find it useful!

Here’s what’s already in:
-Methodology (How to approach a hw hacking project)
-Basics (common protocols,tools)
-Reconnaissance (Board Analysis) -Interface Interaction (How to find, connect to, and exploit UART, JTAG, SPI, etc.)
-Bypassing Security Measures (An introduction to voltage glitching techniques)
-Hands-On Examples
---Case study on hacking an Asus router (led to a CVE update)
---Reversing drone communication (land it with your PC)
-Network Analysis and Radio Hacking (in progress)

If you’re curious, check it out at hardbreak.wiki! Feedback is very appriciated —this is my first project like this, and I’m always looking to improve it.
If you’re feeling generous, contributions over Github (https://github.com/f3nter/HardBreak) are more than welcome—there’s way more to cover than I can manage alone (wish I had more free time, haha).
Thanks for reading, and happy hacking!
Ncurses-rs project discontinued by the author
Wish I could find where someone at AWS described in great detail why their status page was so useless for so long. It basically needed so many approvals to change it (which was disincentivized by SLAs) that issues were usually resolved first.

That’s setting aside when they hosted the status red/yellow/green indicator images on s3, so the surest sign that s3 was having issues was that the status indicators didn’t load at all.
Or they store your password insecurely — plain text or merely “encrypted” with XOR.

I still see both of those regularly.
Please name me one technological advance of major import in the fundamental transformer kernel space that has occurred in the last decade that has any import at all on today's LLMs.

I will wait.
$ git clone git@github.com:ghostty-org/ghostty.git

$ cd ghostty

$ zig build -Doptimize=ReleaseFast

$ ./zig-out/bin/ghostty
The author is clearly talented and experienced building server-side systems. So while the language itself is new to the author, the design and architecture would be largely the same if this project were written in Ruby, C, Python, or Javascript.

Had they built something outside of their comfort zone, the results would probably be a lot more messy.
I'm using WebGPU as a nice modern graphics API that is at the same time much more user-friendly and easier to use compared to e.g. Vulkan. I'm using a desktop implementation of WebGPU called wgpu, via it's C bindings called wgpu-native.

My browser doesn't support WebGPU properly yet, so I don't really care about running this thing in browser.
On top of it - russia simply f*cking in a multiple possible ways. Its just a disaster on top of disasters.

they could simply ALLOW to land airplane on they land and hide what happen (similar to what they did with CEO of Total airplane or Polish presedent "accidents").

Plus this might save everyone on the plane, case it might had enough brake fluids and other liquids to make a safe landing.

But no their decided to sink it in the sea to hide any possible proofs.
I imagine package managers will start picking this up shortly since it just released publicly.
The worm has entered the multiverse.
Also interested in resources here -- familiar with python, go, rust, but never used a lisp.

As a learning experiment, I was able to use the fennel website to convert my Hammerspoon config from lua to fennel, but I still struggle to add new functionality. Certainly have not delved into macros, but this is where much of the power lies AIUI.
As a software developer that works in Rust as well I applaud any effort to unify dependecies where possible — if you took one of my projects however and you went all like yolo and changed my chosen dependencies in a major distro I would get all the heat for a choice I didn't make.

This means if you change my chosen dependencies you are responsible to ensure testing exists.

Unless debian packagers provide the tests to avoid logic errors
See my answer to artemonster above.
You can't agonize on the best way to shave a yak if there's only one way to do it.
Pricing per million tokens:

Model Input Output
─────────────────────────────────────
Claude 3.5 Sonnet $3.00 $15.00
GPT-4o $2.50 $10.00
Gemini 1.5 Pro $1.25 $5.00
Deepseek V3 $0.27 $1.10
GPT-4o-mini $0.15 $0.60
Thanks, I briefly read the changes on cppreference. It's a good list (although I don't get many of the points as I'm an amateur) but I think my small project doesn't benefit a lot.
Yes, your name will forever be on that pull request.
So I will see how well it works on FreeBSD, but I love the development model, keeping it "closed" for the 1.0 (focus and polish), I have not tested it yet, but it already "feels" like professional engineering work.
Bogus Pirate IPTV Portals Run by Law Enforcement "Entrap Hundreds"
The context in the article:

"Broadcom and Netflix have been embroiled in a separate patent dispute since 2018 over Netflix's alleged infringement of Broadcom patents related to video streaming technology, with cases in California, Germany and the Netherlands."

"Palo Alto, California-based Broadcom acquired VMware for $69 billion last year. Netflix's lawsuit said that VMware's vSphere virtualization platform for deploying and managing virtual machines infringes the streaming giant's patents related to virtual-machine communications."

Broadcom has an active patent lawsuit against Netflix. Netflix's defense is using a counter assertion strategy now that Broadcom owns VMWare.
Really liked that post, then again Lua is one of my favourite languages.

I wrote this post https://andregarzia.com/2021/01/lua-a-misunderstood-language... some time ago and it kinda touches similar points as the OP. Read on if any of yous want to see yet another person talking about Lua.
Ssh keys are files that can be moved easily from device to device. That's very different to using e.g. your proprietary macbook internals as your login key. Completely different lock-in.
A while ago, I created an interactive explanation of the different parts of a minimal ELF file: https://scratchpad.avikdas.com/elf-explanation/elf-explanati...

I wrote this page for my own compiler that I'm working on, but I think it would be a good complement to this article. Note that the page is not that great on mobile, the extra real estate on desktop really helps.
tried this doesn't work do i need some specific zig version?
Then you're missing out on juicy stuff...

I work with a number of overseas clients where getting extra IPv4 is nearly impossible. I'll see them setup a ip forwarding box to tons of different applications. That application may have its own reverse proxy serving even more stuff.

The real world has some scary things in it.
As someone who makes his money from hosting “forums”, I can NOT confirm that forums are dead. Maybe the classical ones, but not places like HN, where the content is interesting and peoples opinions are appreciated.
Ah; fair play then.

The A and B trims in the US are the lowest tiers that Mercedes-Benz offers and are spartan, but tacky.

Tesla’s high-end cars don’t have high-end cabins; we agree there.

In the recent past, a Model S with FSD was $143k for the Plaid trim. This was comparable in price to a Benz S550 or a BMW 750i, both of which have incredible, incredible interiors. Super plush, real leather seats; rare wood grain everywhere; customization to no end; coffin-quiet cabins; plush air suspension; etc.

That’s before taking the dealer experience into account. I don’t have experience with Benz dealers, but my understanding of them is that they are actually worth spending time in, and they take care of you when things go wrong (loaners of equivalent trim or just below; great coffee; clean centers; etc.)

Meanwhile, both Teslas offer cabins that I’d say are beneath what you’d get from a maxed-out Honda Accord. I have two Model 3s (old and new designs) and have rented the S a few times now, and I love Teslas, for what that’s worth.

Mobile service kicks ass, but if you need to bring the thing in for service, you’re probably looking at Uber credits. Shameful for the price.

Technology was the only thing the Tesla had the upper hand in.
Blackstone, KKR, CVC Curbed by China's IPO Clampdown
Please tell me what quantum leap was provided by LLMs.
Please inform me of any developments that made current LLMs possible.

I contend that there are none. Witness the actual transformer kernel technologies over the last 20 years and try to find a single new one.

Neural Networks? that's 90's technology.
Scale is the only new factor I can think of.

This is an investor-dollar driven attempt to use brute-force to deliver "magical" results when the fundamental technology is being mis-represented to the general public, to CTOs, and even to Developers.

This is dishonest and will not end well.
I don’t think the article is trying to answer “why.” (That part is obvious.)

I think it’s trying to answer “who.” That is, who among the tech billionaires would happily align with a criminal, authoritarian leader for a few more points on the net worth leaderboard or a taste of political power?
20 years ago most people were on ISDN.
> Not on FreeBSD, NetBSD, OpenBSD or Solaris.

Can you cite any sources? I wasn't able to find any documentation that corroborates what you said when I wrote the article. The few texts I found actually suggested otherwise. Maybe things have changed since then?

> You can still make system calls from normal programs, you just need to list the addresses of system call instructions in an ELF section named openbsd.syscalls.

I see. So they have added a mechanism to list the sections allowed to perform system calls. That's news to me. Do they guarantee the system call numbers will remain stable though? That older system calls will remain available?
Looks like an amazing resource for webauthn. Currently diving into this so it comes at a nice time for me.

But it's also great advertising against WebAuthn. Hard to believe that this kind of complexity is needed, but as with OpenID Connect it feels like enterprise interests are running the ship, not end-users. Ease of implementation seems like a non-goal.
I've been using Ghostty for several months now (used Alacritty before that). Ghostty is really, really good. It's fast, it gets the text rendering right (many cross-platform terminals struggle with this), and it has all the features I need.

It's also some very well-written Zig code. We use some of the code for graphemes in Bun for `Bun.stringWidth`.
Ghostty has a hard-to-find "quake mode" that may interest some.

During the beta I had it configured like this on macOS:

keybind = global:cmd+space=toggle_quick_terminal
quick-terminal-animation-duration = 0.1

There isn't an option to set the default height of the "quick terminal" window that I'm aware of but you can drag the bottom of the window after it opens and it will persist between toggles.
Alas, educational architectures like the Brookshear Machine and Little Computer look nothing like real ones, making them worse than useless: in my experience students who take courses using these often end up with a more distorted understanding of computers than those who take no classes at all.

Most people who want to learn a bit about how their machines work would be better served by taking an operating systems course. Same goes here: if you only have time for a short tutorial, I recommend "Writing my own bootloader" instead. [1]

(This is not meant to say that the Write your own VM tutorial is a bad tutorial; only that, in my experience, most people who'd do it would be best served by a different subject)

[1] https://dev.to/frosnerd/writing-my-own-boot-loader-3mld
Yeah, but it's not enough. Who's the next US president? Why is the Amazon rainforest being burned down? How many % support does AfD have? I know good people are out there, but it only takes so many to ruin it for the rest of us.
"Rapidus Obruo", apply directly to the keel.
Honestly I think it's just folks getting away with running their mouth. Looking someone in the eye and telling them they're full of shit fell out of fashion a few decades ago so there doesn't seem to be a whole lot of social pressure on bullshit in general. Add a multi-billion dollar industry that actively incentivizes broadcasting bullshit takes and in retrospect the outcome seems obvious.
you have got to be joking or else wildly uninformed. SF Bay Area sailing is known across the world. There are international races here.
My biggest issues are xdg, sound thru pulse, printer stuffs, things like that which have connections in snap but don't seem to work quite right.
You answered your own question!

“Boss, can I change this indicator from green to red?”

“How much will that cost us?”

“About a million dollars an hour.”

“No.”
You have a point but I don't think it's black and white.

There is a spectrum between full scale revolution / civil war and targeted assassinations. The number of guns is also a spectrum and Russia is on par with many European countries (according to Wikipedia).

Belarus has fewer guns and they were very close to overthrowing the dictator. Unfortunately, as you said, in the west, it's enough to make yourself look like a victim and the optics will often force the oppressors to cease action. Belarusians chose to imitate the west without understanding why it works. We saw reports of police officers putting down their weapons instead of turning them on the oppressors.

Shinzo Abe was killed using a completely home made shotgun. You don't wanna go to war with one of those but it's entirely sufficient for killing a single target. You will never get close enough to a high profile one but as you said, there are many servile people in the chain of command. Russia no doubt has many parents who lost their only sons and shouldn't have much to live for, yet we don't see targeted assassinations.

I've heard reports that the rebels in Myanmar started with homemade weapons and muskets and they're getting progressively better armed as they steal weapons from oppressors they kill. But they're also predominantly young and willing to act. What I see from Russia is lethargy.

I also don't know how well the serviles in Russia are getting paid, we see reports of soldiers making appeals to Putin after not getting paid (showing that they still believe in their glorious leader).

It's all very hard to judge but the best way to get neutral "apolitical" people to act is to put them between a rock and a hard place and if they still refuse to stand for good against evil, they seeing them mowed down in infrared is a good alternative for me. Better than seeing innocent people killed.

> that's why your benevolent overlords want to take your guns away too

And this is a very worrying trend. What is more sinister is the tabooization of violence. Ultimately all real power comes from violence (usually just the credible threat of it) but the chain of logic seems to be too long for common people to understand. And when one side gives up (or is gradually slowly but systematically deprived of) their access to violence, it will lead to oppression.
Name a country that is less racist.
Yes, status page got updated: https://status.openai.com/. It says "This issue is caused by an upstream provider and we are currently monitoring."
There's a difference between fluffy that's phishable (passwords) and fluff that isn't (webauthn).

Not all fluff is equal.
CVEs are detected on third party libraries. This is why you must upgrade.
In Rust, crates and not modules are the unit of compilation. Hot reloading is a whole other problem for the Rust ecosystem. You'd probably have to build it yourself or buy into a whole engine.
This will definitely end well /s
As far as I know, it's the opposite (using Skia to render). Flutter for the web is a second-class citizen, whereas for mobile apps, it's quite productive.
Hard rules are the problem. There is a lot of "it depends."

After over 40 years of programming, I continue to reduce the size of functions and find it easier to write and understand when I return to them. Ten lines are now a personal guideline.

However, a linear function with only tiny loops or conditionals can be easily understood when hundreds of lines are long, but not so much with nested conditionals and loops, where there is natural decomposition into functions.

I observed that the same guidelines became rules problems when test coverage became popular. They soon became metrics rather than tools to think about code and tests. People became reluctant to add sanity check code for things that could should never happen because it brought down code coverage.
This is pretty much my thought as well -- FWICT the ultimate problem here isn't a technical one, but a philosophical disagreement between how Rust tooling expects to be built and how Debian would like to build the world. Debian could adopt Rust's approach with minor technical accommodations (as evidenced by `cargo-deb`), but to do so would be to shed Debian's commitment to global version management.
I initially scoffed when I read "platform-native UI" as I've found programs made in Electron typically proclaim something similar when they are anything but native, so when I saw it used GTK for Linux (SwiftUI for MacOS) my interests were piqued. Always fun to mess around with new terminal emulators.

edit: alas, it doesn't support bitmap fonts..
I might just be regurgitating the article, but isn't the point that it can massively increase the time and effort it takes to scan a system for valid vulnerabilities?
0.13.0

https://github.com/ghostty-org/ghostty/blob/4b4d4062dfed7b37...

The full script is pretty much:

$ wget https://ziglang.org/download/0.13.0/zig-linux-x86_64-0.13.0....

$ tar xvf zig-linux-x86_64-0.13.0.tar.xz

$ git clone git@github.com:ghostty-org/ghostty.git

$ cd ghostty

$ ../zig-linux-x86_64-0.13.0/zig build -Doptimize=ReleaseFast

$ ./zig-out/bin/ghostty
Then they can be removed in two steps. First, allow people to come and work to get wealthy so they can compete with other wealthy people. Second, allow wealthy people to spend money.
This is the first thing I went looking for when looking at the docs, thank you.
So my claim is that you do this less often than you claim to. There is some cutoff where you trust the code enough to not investigate it further. I'm of the opinion that this trust should generally be pretty close to the actual thing you're working on or investigating, and if it isn't that's a cultural issue that won't be solved by just "prefer to inline".
It got updated, they have acknowledged there is a major outage.
Zig 0.13 is required according to https://ghostty.org/docs/install/build
I have found the following community site for generating Ghostty config quite helpful https://ghostty.zerebos.com/
Japan Airlines reports cyberattack on system, impacting flights
Are Rust ABIs even guaranteed to be stable for a given compiler version and library features? ie. doesn't the compiler allow itself to change the ABI based on external factors, like how other dependents use it?
There is the equality gotchas on JavaScript but then you have 1-indexed arrays in Lua, which is a footgun that I know exists, I try to avoid shooting myself in the foot with it but I keep doing it.

It is beyond a footgun, more like a footgun concealed as a shoehorn.

Either way I find embedding a Lua VM into a project so much easier than embedding a Javascript one.
What would you consider the “RISC-V equivalent” of TrustZone? Last time I was curious I didn’t find anything.

(FWIW I agree with the other commenter that these ""security"" features are useless, and feel to me more like check-box compliance than anything else (Why does TrustZone work with function calls? What’s wrong with IPC! Also, what’s wrong with privileged mode?). Just seems like a bit of a waste of silicon really.)
>Because I need to know what they actually do?

Strange. The longer I've been programming, the less I agree with this.

>For even a simplest helper, there's many ways to implement it.

Sure. But by definition, the interface is what matters at the call site.

> That's how you often get accidental O(n^2) in random places.

Both loops still have to be written. If they're in separate places, then instead of a combined function which is needlessly O(n^2) where it should be O(n), you have two functions, one of which is needlessly O(n) where it should be O(1).

When you pinpoint a bottleneck function with a profiler, you want it to be obvious as possible what's wrong: is it called too often, or does it take too long each time?

> If the helper fn is otherwise abstracting a small idiom, I'd argue it's only obscuring it and providing ample opportunities to screw up.

Abstractions explain the purpose in context.

> I'm more of a "don't do stupid shit, you'll have less bugs to fix and less performance issues for customers to curse you for" kind of person

The shorter the function is, the less opportunity I have to introduce a stupidity.
That makes sense, but what if your service goes down and we can't get a hold of all the valid data? Before I invest in the $0/year fee, I'd like you to confirm that you're using the Blockchain somehow?
Theoretically, it can be. However, it’s only relevant in specific circumstances that Rust happens to provide, for example one of the requirements is that the package manager / build system allows you to have two different versions of the same dependencies in a single binary - which is comparatively rare.
Doesn't matter if it's widely known, it honestly is much nicer to work with than Javascript and is being used as it is intended, instead of being a half-baked language designed in a hurry, to work in a browser, that got repurposed as a general purpose scripting language later.
Why not set up your own lemmy instance?
Initial implementation and maintenance need to keep design in mind, and there should be more clarity around responsibility and costs of particular designs and how flexible the client is with the design at a given point in time. It's an engineering process and requires coordination.
> How bad would it suck if every Python app you installed needed to have its own venv for example?

I would love to have that. Actually that's what I do: I avoid distribution software as much as possible and install it in venvs and similar ways.
DeepSeek-V3, ultra-large open-source AI, outperforms Llama and Qwen on launch
credit: https://x.com/TSLAstreet
> suddenly you realize CreateProcessA was and always has been the superior API

Throw in IOCP and you realize that NT is a pretty solid, well-thought-out OS
It's precisely when "you have frequently, even in the same expression, dozens of different kinds of additions, multiplications, divisions, etc., between scalars, vectors, matrices, tensors, complex numbers, various kinds of physical quantities, and so on" that operator overloading should be driven by custom syntax macros. (E.g. in a Rust-like language you might define math_expr!(...), float_expr!(...), matrix_expr!(...) etc. syntax macros, each with its own special semantics for operator symbols.) That way a program can directly express the variety of overloading that's relevant in any given context, as opposed to relying on fragile hacks like special __add__ and __mul__ "traits" that are dispatched in a type-dependent way.
> I would be quite surprised if some recoverable metadata bit flip or something caused the system to irrecoverably fail to boot just because the readonly flag also prevented fsck from fixing errors.

This is exactly what happens maintaining bootloaders. As time goes on, the amount of configuration to get ext4 to reliably read a possibly dirty filesystem without modifying it has skyrocketed to the point where I started putting /boot on ext2 again.
>Because people pick bad names for methods, and I've been hurt before.

So you write long functions because other people are bad at writing short ones?
Dang: Link should be https://github.com/python/cpython/issues/86904
Presumably expressions of interest?